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We've decided to use Maltego in combination with WhoisXML API's integration for the purpose 
of providing actionable and real-time intelligence on a currently active domain portfolio known to 
have been operated by known high-profile cybercriminals where we used our own high-profile 
cybercriminal data set for the purpose of empowering fellow researchers and vendors including 
organizations with the necessary actionable intelligence to help them stay on the top of their 
game including to assist vendors and organizations on their way to do a proper cyber attack 
attribution in terms of tracking down and responding to these campaigns including to assist U.S 
Law Enforcement and the U.S Intelligence Community on its way to track down and prosecute 
the cybercriminals behind these campaigns. 


In this article we'll discuss in-depth and offer practical and actionable threat intelligence on a 
currently active domain portfolio belonging to high-profile cybercriminals which we obtained 


using Maltego in combination with WhoisXML API's integration including to use our own data set 
of Known email addresses known to belong to high-profile cybercriminals internationally. 
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Related domains known to have been currently registered and in operation courtesy of 
high-profile cybercriminals internationally which we obtained using our own data set of 
known email addresses belonging to high-profile cybercriminals: 
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zkabcn[.]com 
yywl886[.Jcom 
center-club[.]ws 
zhugangfhc[.]Jcom 
zjleiyang[.]Jcom 
zpxinhong[.]Jcom 
vqx1[.]Jcom 
wgx1[.]Jcom 
ehackerz[.]net 
soft-babez2[.]website 
soft-babez[.]cc 
tausendme{[.]us 
rlpass[.]Jcom 
streamporn[.]co 
soft-babez[.]Jcom 
pornzddl[.Jcom 
theoneu[.Jus 
qsertongx[.]cn 
sdlhjs[.]net 
aibinbing[.Jcn 
gorod-grekhov{.]info 
zmxlife[.]com 
top-obnall.Jsu 
chidaowei[.]Jcom 
falshivie-dengi[. Jat 
tengdagl[.]Jcom 
nanpingjie[.]net 
sunyuphotos[.]Jcom 
black-bank[.]biz 
dunianghao[.]Jcom 
gorod-grekhov[.]Jorg 
whijialan[.Jcom 
piratia[.Jorg 
whjgjhj[.]Jcom 


black-obnal[.]su 
limbsoftware[.]com 
icaiasn[.]Jorg 
theprofessionalseo[.]com 
zentrixplus[.]net 
stdtestkithome[.]com 
the-seo-service[.]com 
mriganka[.]Jcom 


@ 


vimi.su@yandex.ru 


) 
4 
vimi.su 
. 6. eo... ta 
Baal 
>] >] 2] 2) 
vimi.su com.apps.seti.sociainetworks search hide. frends. vk vimi.su-1.apk 
o2 o> ead “pas 
Pas 2) 2] 2) 
com.mycompany.myappehapieLoizteam_4415831-1.apk vimi.su com.mycompany.myapp-1.apk 
o eo... 
2] 2] 


com.mycompany.myapp-2.apiom.mycompany.myapp 


We'll continue monitoring the campaign including to look for new domain registrations and will 
post updates as soon as new developments take place. 


